esp-idf/SECURITY.md

# Security Policy

## Supported Versions

Please refer to https://docs.espressif.com/projects/esp-idf/en/latest/esp32/versions.html#support-periods for more details on ESP-IDF supported versions and support period policy.

## Reporting a Vulnerability

Please refer to [Espressif Security Incident Response Process](https://www.espressif.com/sites/default/files/Espressif%20Security%20Incident%20Response%20Process%20v1.0_EN.pdf) on the guidelines to report a security vulnerability. Please do **NOT** create a public GitHub issue.
Add security policy guidelines Add basic information about process for reporting security vulnerabilities in Espressif solutions. This filename is recognized by GitHub: https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository 2022-06-23 23:11:38 -04:00			`# Security Policy`

			`## Supported Versions`

			`Please refer to https://docs.espressif.com/projects/esp-idf/en/latest/esp32/versions.html#support-periods for more details on ESP-IDF supported versions and support period policy.`

			`## Reporting a Vulnerability`

Add a note about Espressif Security Incident Policy document 2023-05-10 02:39:42 -04:00			`Please refer to [Espressif Security Incident Response Process](https://www.espressif.com/sites/default/files/Espressif%20Security%20Incident%20Response%20Process%20v1.0_EN.pdf) on the guidelines to report a security vulnerability. Please do NOT create a public GitHub issue.`